fix: add CODEBUFF_API_KEY to CI env vars for SDK tests

- Add additionalCiEnvVars array for env vars needed by SDK/CLI but excluded from web
- CODEBUFF_API_KEY is injected into CI for SDK integration tests
- Maintains type-level protection: web still cannot access env.CODEBUFF_API_KEY

Author: brandonkachen

packages/internal/src/env-schema.ts

@@ -2,6 +2,10 @@ import { clientEnvSchema, clientProcessEnv } from '@codebuff/common/env-schema'
 import z from 'zod/v4'
 
 export const serverEnvSchema = clientEnvSchema.extend({
+  // Codebuff API key - used by CLI/SDK for authentication
+  // NOTE: Web should NOT use this directly - users must provide their own key
+  // See web/.eslintrc.cjs for enforcement
+  CODEBUFF_API_KEY: z.string().optional(),
   // LLM API keys
   OPEN_ROUTER_API_KEY: z.string().min(1),
   OPENAI_API_KEY: z.string().min(1),
@@ -36,6 +40,8 @@ export type ServerEnv = z.infer<typeof serverEnvSchema>
 export const serverProcessEnv: ServerInput = {
   ...clientProcessEnv,
 
+  // Codebuff API key
+  CODEBUFF_API_KEY: process.env.CODEBUFF_API_KEY,
   // LLM API keys
   OPEN_ROUTER_API_KEY: process.env.OPEN_ROUTER_API_KEY,
   OPENAI_API_KEY: process.env.OPENAI_API_KEY,

scripts/generate-ci-env.ts

@@ -47,10 +47,14 @@ function parseArgs() {
   return { prefix, scope }
 }
 
+// Additional env vars needed for CI that aren't in the web env schema
+// CODEBUFF_API_KEY is used by SDK/CLI but intentionally excluded from web's typed env
+const additionalCiEnvVars = ['CODEBUFF_API_KEY']
+
 function generateGitHubEnv() {
   const { prefix, scope } = parseArgs()
   const varsByScope = {
-    all: serverEnvVars,
+    all: [...serverEnvVars, ...additionalCiEnvVars],
     client: clientEnvVars,
   }
 

sdk/src/__tests__/run.integration.test.ts

@@ -3,10 +3,17 @@ import { describe, expect, it } from 'bun:test'
 
 import { CodebuffClient } from '../client'
 
+const skipIfNoApiKey = () => !process.env[API_KEY_ENV_VAR]
+
 describe('Prompt Caching', () => {
   it(
     'should be cheaper on second request',
     async () => {
+      if (skipIfNoApiKey()) {
+        console.log('Skipping test: CODEBUFF_API_KEY not set')
+        return
+      }
+
       const filler =
         `Run UUID: ${crypto.randomUUID()} ` +
         'Ignore this text. This is just to make the prompt longer. '.repeat(500)